The Federal Bureau of Investigation is investigating a malware distribution campaign conducted through Valve's Steam platform that targeted cryptocurrency users between May 2024 and January 2026, according to Decrypt. The malicious software was designed to steal cryptocurrency holdings, harvest user credentials, and deploy hidden mining operations on infected computers.
The attack exploited Steam's distribution network by disguising malware-laden applications as legitimate games. Bad actors successfully uploaded compromised titles to the platform, which were then installed by unsuspecting users, compromising their systems. The operation underscores vulnerabilities in application vetting processes on major digital storefronts despite platform safeguards.
Steam's scale amplifies the potential exposure of such campaigns. The platform reported over 132 million monthly active users and hosts more than 117,000 games as of 2025, making it an attractive vector for threat actors seeking widespread distribution of malicious code. The investigation highlights recurring security gaps in how platforms balance developer accessibility with user protection, particularly regarding cryptocurrency-related threats.